Privacy Act Statement and describes how the information collected using the form may be 
used, and under what conditions HUD or the PHA may release the information collected. 

Earned Income Verification (EIV) Records 

PHAs that access UIV data through HUD's Enterprise Income Verification (EIV) System are 
required to adopt and follow specific security procedures to ensure that all EIV data is 
protected in accordance with Federal laws, regardless of the media on which the data is 
recorded (e.g. electronic, paper). These requirements are contained in the HUD-issued 
document. Enterprise Income Verification (EIV) System , Security Procedures for Upfront Income 
Verification data. 

PHA Policy 

Prior to utilizing HUD's EIV system, the PHA will adopt and implement EIV security 
procedures required by HUD. 

Criminal Records 

The PHA may disclose the criminal conviction records which the PHA receives from a law 
enforcement agency to officers or employees of the PHA, or to authorized representatives of 
the PHA who have a job-related need to have access to the information [24 CFR 5.903(e)], 

The PHA must establish and implement a system of records management that ensures that any 
criminal record received by the PHA from a law enforcement agency is maintained 
confidentially and not misused or improperly disseminated. MPHA will destroy the such 
records once the purpose for which the record was requested has been accomplished, including 
expiration of the period for filing a challenge to the PHA action without institution of a 
challenge or final disposition of any such litigation [24 CFR 5.903(g)], 

The PHA must establish and implement a system of records management that ensures that any 
sex offender registration information received by the PHA from a State or local law 
enforcement agency is maintained confidentially and not misused or improperly disseminated,. 
MPHA will destroy such records, once the purpose for which the record was requested has 
been accomplished, including expiration of the period for filing a challenge to the PHA action 
without institution of a challenge or final disposition of any such litigation. However, a record of 
the screening, including the type of screening and the date performed must be retained [Notice 
PIH 2012-28], 

The requirements is this section do not apply to information that is public information, or is 
obtained by a PHA other than under 24 CFR 5.905. 

Medical/Disability Records 

PHAs are not permitted to inquire about the nature or extent of a person's disability. The PHA 
may not inquire about a person's diagnosis or details of treatment for a disability or medical 
condition. If the PHA receives a verification document that provides such information, the PHA 
should not place this information in the tenant file. The PHA should destroy the document. 
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